CyberSecurity Analyst II

PRIMARY FUNCTION:

The Cyber Security Analyst is responsible for maintaining the integrity and security of enterprise-wide systems, network and applications at Jefferson. Supports cyber security initiatives through predictive and reactive analysis, articulating emerging trends to leadership and staff. Be an active player during enterprise incident response efforts, driving incidents to timely and complete resolution. Reviews threat data from various sources and develops detection and response capabilities, correlates actionable security events into Security Event and Incident Management platform. Utilizes understanding of attack signatures, tactics, techniques and procedures associated with advanced cyber security threats. Develops analytical products and process fusing enterprise and all-source intelligence.

ESSENTIAL FUNCTIONS:

• Develop and carry out information security policies and standards
• Develop or implement cyber security tool set to assist in detection, prevention and analysis of security threats.
• Develops security strategies to respond to and recover from a security breach with strong understanding of Security Operation Center (SOC) operations both on premise and managed.
• Awareness training of the workforce on cyber security standards, polices and best practices
• Experience using Windows / Unix / Linux / iOS systems in server and workstation environments. Strong understanding of hardware / software and cloud environments.
• Expert in analyzing and investigating network and system intrusions, malware attacks and recommend / implement prevention methods.
• Experience with Data Loss Prevention (DLP) systems, implementation and process in on premise and cloud environment.
• Experience in cyber security incident response and breach investigations including forensic investigations.
• Take ownership of multiple security products thru lifecycle e.g. DLP, Vulnerability Management, SIEM etc.,
• Must be able to co-ordinate project management and drive adoption of new capabilities.
• Must mentor junior members in the team for success of their individual ownership
• Must demonstrate 5+ years of successful security project & product delivery.
• Reviews IT systems and business processes to identify information security risks and regulatory non-compliance, and guide remedy of issues noted.
• Designs and delivers training on various Cyber Security initiatives.
• Maintains familiarity with HIPAA / PCI-DSS and other Information Security regulations.
• Interacts with co-workers, visitors, and other staff consistent with the iSCORE values of Jefferson.

OTHER FUNCTIONS AND COMPETENCIES:

• Active team player in cyber security projects at Jefferson.
• Conducts various cyber security assessment including risk assessments, DLP assessments, Vulnerability assessment and remediation and reporting
• Generates information security metrics by collecting and reporting on data from various systems and methods.
• Supports other information security operations as required

EDUCATIONAL/TRAINING REQUIREMENTS:

Bachelor’s degree in an information technology field preferred

_________________________________________________________________________

CERTIFICATES, LICENSES, AND REGISTRATION:

At least one information security certification, such as a SSCP, GSEC, or professional certificate required. CISSP or CISM preferred

_________________________________________________________________________

EXPERIENCE REQUIREMENTS:

At least five years of experience in an information security function, ability to multi-task, a keen eye for detail, strong organizational skills, the ability to thrive in fast-paced, high-stress situations, ability to communicate cyber security issues to peers and management.

3+ years solid understanding of Cyber Security & IT controls, network / systems / application penetration testing and vulnerability assessments. Experience with NIST and ISO frameworks. Solid knowledge of HIPAA, HITECH, and other IT security governing bodies.

About Jefferson

Nationally ranked, Jefferson, which is principally located in the greater Philadelphia region, Lehigh Valley and Northeastern Pennsylvania and southern New Jersey, is reimagining health care and higher education to create unparalleled value. Jefferson is more than 65,000 people strong, dedicated to providing the highest-quality, compassionate clinical care for patients; making our communities healthier and stronger; preparing tomorrow's professional leaders for 21st-century careers; and creating new knowledge through basic/programmatic, clinical and applied research. Thomas Jefferson University, home of Sidney Kimmel Medical College, Jefferson College of Nursing, and the Kanbar College of Design, Engineering and Commerce, dates back to 1824 and today comprises 10 colleges and three schools offering 200+ undergraduate and graduate programs to more than 8,300 students. Jefferson Health, nationally ranked as one of the top 15 not-for-profit health care systems in the country and the largest provider in the Philadelphia and Lehigh Valley areas, serves patients through millions of encounters each year at 32 hospitals campuses and more than 700 outpatient and urgent care locations throughout the region. Jefferson Health Plans is a not-for-profit managed health care organization providing a broad range of health coverage options in Pennsylvania and New Jersey for more than 35 years.

Jefferson is committed to providing equal educational and employment opportunities for all persons without regard to age, race, color, religion, creed, sexual orientation, gender, gender identity, marital status, pregnancy, national origin, ancestry, citizenship, military status, veteran status, handicap or disability or any other protected group or status.